8 results found

1. Product Suggestions in Autocomplete when using Commerce Search v3

   With Commerce Search V3, Autocomplete currently does not provide suggestions for specific products or website content. Autocomplete should absolutely display products, at a minimum. However, displaying content pages is important too; as it is, users cannot search content at all with V3 without customization.

   •  

   9 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  Delete…  ·  Admin →
   Building  ·  AdminSara Winter (Principal Product Manager, Optimizely) responded

   We have added this item to our roadmap for Q4 2026 and are actively building base configurations that will allow product suggestions to be included.

2. Change the default value of Default Email Address setting

   Emails sent from Sandbox environment should only use the domain "@commerce.insitesandbox.com" in From Address. Otherwise, emails will be blocked by the Email Service Provider (ESP) due to failing DMARC verification. The domain "@insitesoft.com" is NOT safe to be set as From Address.

   The value "defaultemail@insitesoft.com" has been obsoleted since all Configured Commerce customers have moved to Mission Control. We need a new default value for the Default Email Address setting, something like "defaultemail@commerce.insitesandbox.com".

   2 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Building  ·  2 comments  ·  Delete…  ·  Admin →

3. Bot prevention measures

   Please note: this idea required splitting so that various points may be addressed as information becomes available.

   New request:

   1. Bot Protection - Challenge suspected bots to confirm user authenticity
   2. Bot detection with javascript to identify headless browsers
   3. Any other WAF rules to protect the website from anonymous usage and attacks

   Original request:

   Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

   1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
   2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks
   3. Bot Protection - Challenge suspected bots to confirm user authenticity
   4. Bot detection with javascript to identify headless browsers
   5. Captcha functionality - when users initially come into the site or users are starting an order or users are entering credit card information
   6. WAF compromised credentials check
   7. Any other WAF rules to protect the website from anonymous usage and attacks

   There are multiple problems if there are no proper security rules in place.

   • Problem-1: Websites are going down – Loss of business and sales
   • Problem-2: There are many unnoticed attacks, as we know the attacks only after the websites go down
   • Problem-3: There is a possibility of data mining from our websites if there is no security rules

   Please note: this idea required splitting so that various points may be addressed as information becomes available.

   New request:

   1. Bot Protection - Challenge suspected bots to confirm user authenticity
   2. Bot detection with javascript to identify headless browsers
   3. Any other WAF rules to protect the website from anonymous usage and attacks

   Original request:

   Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

   1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the… more
   11 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Delete…  ·  Admin →
   Building  ·  AdminNathan Brown (Technical Senior Product Manager, Optimizely) responded

   We are currently building support in CFG for Cloudflare for SaaS/O2O, which will allow customers to implement and maintain their own Cloudflare WAF in front of Optimizely's. If a customer chooses to stand up their own WAF, they would be able to tailor it to fit their business needs specifically by including things like rate limiting, bot protection, and other Cloudflare configurations.

   Note: Optimizely does already take action to mitigate attacks by working with the customer to implement challenges and/or specific rules for the issues the customer is experiencing.

4. Website Stability via Rate Limiting

   Please note: this idea required splitting so that various points may be addressed as information becomes available.

   New request:

   1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
   2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks

   Original request:

   Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

   1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
   2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks
   3. Bot Protection - Challenge suspected bots to confirm user authenticity
   4. Bot detection with javascript to identify headless browsers
   5. Captcha functionality - when users initially come into the site or users are starting an order or users are entering credit card information
   6. WAF compromised credentials check
   7. Any other WAF rules to protect the website from anonymous usage and attacks

   There are multiple problems if there are no proper security rules in place.

   • Problem-1: Websites are going down – Loss of business and sales
   • Problem-2: There are many unnoticed attacks, as we know the attacks only after the websites go down
   • Problem-3: There is a possibility of data mining from our websites if there is no security rules

   Please note: this idea required splitting so that various points may be addressed as information becomes available.

   New request:

   1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
   2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks

   Original request:

   Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

   1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of… more
   6 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Delete…  ·  Admin →
   Building  ·  AdminNathan Brown (Technical Senior Product Manager, Optimizely) responded

   We are currently building support in CFG for Cloudflare for SaaS/O2O, which will allow customers to implement and maintain their own Cloudflare WAF in front of Optimizely's. If a customer chooses to stand up their own WAF, they would be able to tailor it to fit their business needs specifically by including things like rate limiting, bot protection, and other Cloudflare configurations.

   Note: Optimizely does already take action to mitigate attacks by working with the customer to implement challenges and/or specific rules for the issues the customer is experiencing.

5. Enable Cloudflare's leaked credentials detection

   Please note: this idea required splitting so that various points may be addressed as information becomes available.

   New request:

   1. WAF compromised credentials check

   Original request:

   Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

   1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
   2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks
   3. Bot Protection - Challenge suspected bots to confirm user authenticity
   4. Bot detection with javascript to identify headless browsers
   5. Captcha functionality - when users initially come into the site or users are starting an order or users are entering credit card information
   6. WAF compromised credentials check
   7. Any other WAF rules to protect the website from anonymous usage and attacks

   There are multiple problems if there are no proper security rules in place.

   • Problem-1: Websites are going down – Loss of business and sales
   • Problem-2: There are many unnoticed attacks, as we know the attacks only after the websites go down
   • Problem-3: There is a possibility of data mining from our websites if there is no security rules

   Please note: this idea required splitting so that various points may be addressed as information becomes available.

   New request:

   1. WAF compromised credentials check

   Original request:

   Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

   1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
   2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks
   3. Bot Protection - Challenge suspected bots to confirm user… more
   5 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Delete…  ·  Admin →
   Building  ·  AdminNathan Brown (Technical Senior Product Manager, Optimizely) responded

   We are currently building support in CFG for Cloudflare for SaaS/O2O, which will allow customers to implement and maintain their own Cloudflare WAF in front of Optimizely's. If a customer chooses to stand up their own WAF, they would be able to tailor it to fit their business needs specifically by including things like rate limiting, bot protection, and other Cloudflare configurations.

   Note: Optimizely does already take action to mitigate attacks by working with the customer to implement challenges and/or specific rules for the issues the customer is experiencing.

6. Proactive Site Monitoring

   Opti should provide proactive site monitoring to its configured commerce customers. Customer should received an alert from Opti about server errors, hosting issues, site restarts, etc. As hosting provider, Opti should support the platform from this perspective and not be reliant on Partners or the Customers to address these types of errors.

   9 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Delete…  ·  Admin →
   Building  ·  AdminNathan Brown (Technical Senior Product Manager, Optimizely) responded

   This work is in progress across multiple areas of the product, including: Mission Control alerts/notifications, Cloudflare O2O support, proactive query analysis in CFG, and other performance improvements.

   
   

   Please see documentation around Mission Control's new Notifications tab - this is the main area where we will be including more alerts in the coming months: https://support.optimizely.com/hc/en-us/articles/44077180697997-Build-and-deploy-notifications

7. Add LaunchDarkly to allowedLibraries whitelist

   Hi,
   Out customer indicated they would like to unify the feature flags and feature experimentation software they use over multiple software applications, which also include software maintained by other partners next to ourselves.
   They already use LaunchDarkly for other software in their stack, and would also like to include their webshop build on Optimizely Configured Commerce to use LaunchDarkly for their feature flags and experimentations.
   Therefore we want to be able to include the following NuGet Package into the Extenstion project for this customer:
   https://www.nuget.org/packages/LaunchDarkly.ServerSdk
   At this moment the PowerShell script validateReferences.ps1 which uses the whitelist of packages in the file allowedLibraries.json is preventing us to include this package in our Extensions project.
   Based on the described Policy here:
   https://docs.developers.optimizely.com/configured-commerce/docs/third-party-library-policy
   We are now filing this request here, in the hope to get this approved.
   Kind regards,
   Kasper de Boer

   Hi,
   Out customer indicated they would like to unify the feature flags and feature experimentation software they use over multiple software applications, which also include software maintained by other partners next to ourselves.
   They already use LaunchDarkly for other software in their stack, and would also like to include their webshop build on Optimizely Configured Commerce to use LaunchDarkly for their feature flags and experimentations.
   Therefore we want to be able to include the following NuGet Package into the Extenstion project for this customer:
   https://www.nuget.org/packages/LaunchDarkly.ServerSdk
   At this moment the PowerShell script validateReferences.ps1 which uses the whitelist of packages in the… more

   25 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Delete…  ·  Admin →
   Building  ·  AdminSara Winter (Principal Product Manager, Optimizely) responded

   Great news! Our team has been working on this and we anticipate that we will most likely deliver it in the November 2026 release. We will provide another update and link the release notes once it is available.

8. Add Preview Option to Email Message Logs

   Currently, we copy the html from the Email Message Logs and save to an html file to "preview" the email in the browser. It seems that this would be a great enhancement for Opti to add a "Preview" button on the page. This would be similar to the "Preview Revision" option on the Email Templates, but using the actual html from the delivered email.

   3 votes

   Vote Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Delete…  ·  Admin →
   Building  ·  AdminSara Winter (Principal Product Manager, Optimizely) responded

   Thank you for submitting this request! We have added this item to our committed roadmap for Q4 2026.

   
   

   We will provide another update and link the release notes when it has been released.